secure_errors 0.1.1

Secure error handling with public-safe responses, incident IDs, and panic boundaries.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55

//! The public-facing error type serialized into HTTP responses.
//!
//! `PublicError` is the **only** struct that may be serialized to HTTP responses.
//! It contains no internal details — only a stable error code, a user-facing message,
//! and an optional request identifier for correlation.

use std::borrow::Cow;

use serde::Serialize;

use security_core::types::RequestId;

/// A safe, client-visible error payload.
///
/// This struct is serializable but not deserializable: it is responses-only.
///
/// Fields:
/// - `code` — a stable machine-readable error code (e.g. `"not_found"`)
/// - `message` — a human-readable message safe for client consumption
/// - `request_id` — optional request correlation id (echo'd back to caller)
///
/// # Examples
///
/// ```
/// use secure_errors::public::PublicError;
///
/// let err = PublicError::new("not_found", "The resource was not found.", None);
/// assert_eq!(err.code, "not_found");
/// ```
#[must_use]
#[derive(Debug, Serialize)]
pub struct PublicError {
    /// Stable machine-readable error code.
    pub code: &'static str,
    /// Human-readable message safe for client consumption.
    pub message: Cow<'static, str>,
    /// Optional request correlation identifier.
    #[serde(skip_serializing_if = "Option::is_none")]
    pub request_id: Option<RequestId>,
}

impl PublicError {
    /// Creates a new [`PublicError`].
    pub fn new(
        code: &'static str,
        message: impl Into<Cow<'static, str>>,
        request_id: Option<RequestId>,
    ) -> Self {
        Self {
            code,
            message: message.into(),
            request_id,
        }
    }
}